Filter
Top Products
Security 11-151
CC
CC
hh
hh
aa
aa
pp
pp
tt
tt
ee
ee
rr
rr
11
11
11
11
SS
SS
ee
ee
cc
cc
uu
uu
rr
rr
ii
ii
tt
tt
yy
yy
The Netopia 4553 provides a number of security features to help protect its configuration screens and your
local network from unauthorized access. Although these features are optional, it is strongly recommended that
you use them.
This section covers the following topics:
■ “Suggested security measures” on page 11-151
■ “User accounts” on page 11-151
■ “Telnet access” on page 11-153
■ “About filters and filter sets” on page 11-154
■ “Working with IP filters and filter sets” on page 11-162
■ “Firewall tutorial” on page 11-170
Suggested security measures
In addition to setting up user accounts, Telnet access, and filters (all of which are covered later in this chapter),
there are other actions you can take to make the Netopia 4553 and your network more secure:
■ Change the SNMP community strings (or passwords). The default community strings are universal and
could easily be known to a potential intruder.
■ Set the answer profile so it must match incoming calls to a connection profile.
■ Leave the Enable Dial-in Console Access option set to No.
■ When using AURP, accept connections only from configured partners.
■ Configure the Netopia 4553 through the serial console port to ensure that your communications cannot be
intercepted.
User accounts
When you first set up and configure the Netopia 4553, no passwords are required to access the configuration
screens. Anyone could tamper with the router’s configuration by simply connecting it to a console.
However, by adding user accounts, you can protect the most sensitive screens from unauthorized access. User
accounts are composed of name/password combinations that can be given to authorized users.
Caution!
You are strongly encouraged to add protection to the configuration screens. Unprotected screens could allow an
unauthorized user to compromise the operation of your entire network.